SAP Security Online!
 
Web SAPSecurityOnline.com
 
   
 
 
 

 
  Creating Reference role. (Master or Parent role)

 

Creating Reference role. (Master or Parent role).

  1. Type PCFG in command line
  2. Type in the name of the role you want to create.

create_derived_role_1

  1. and click create_derived_role_2 and fill  in the description of the role.

 

  1. Go to the menu tab create_derived_role_3 and insert all the t-code and report you want in this role.
  1. Go to the authorization tab create_derived_role_4and click create_derived_role_5 to change the authorizations.

 

  1. Fill in the Org. elements, or you can leave them blank, since reference roles are not assigned to any user. This is not a best practice.

create_derived_role_6

 

  1. Save create_derived_role_7 and generate create_derived_role_9 the role. 

 

Creating a derived role.

  • Follow step 1 and 2.
  • Fill in the Reference role name.

create_derived_role_10

  • Maintain the Org values in authorization tab.

create_derived_role_11

  • Save create_derived_role_8 and generate create_derived_role_9 the role. 
  • Open the reference role (master role) created in step 1 to 7,  and generate all the derived role using this create_derived_role_12
  • It will give you the screen below, click generate and you are done. create_derived_role_13
  • You can assign the derived role to users.

 

 

 

 




 
Copyright © 2005 - 2007 SAP Security Online.com All Rights Reserved.